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VIDEOCIPHER is broken. Several individuals and 
groups are now receiving audio and video from 
Videocipher scrambled services but the degree of results 
varies. None of those who have had results to date have 
received any publicity for their work and we will not reveal 
their names here. This is how it shapes up. 

1) It is possible to acquire incomplete audio recovery 
by modifying the software instructions in device U30. 
However, unless a significant computer is left attached to 
the Videocipher unit, through U30, and appropriate soft- 
ware is driving the computer, the U30 software routine 
approach produces only intermittent results. 

2) When changes are made to device U7, and U30, itis 
possible to acquire between 75 and 90% reliable service. 
This modification is time consuming, requiring between 4 
and 5 hours of skilled work as well as significant test 
equipment. Those going this route report an average of 6 
successes out of every 7 ‘tries’. 

3) Complete descramblers, not starting as Video- 
ciphers, are in proto-type and full working state from at 
least two sources. These are stripped down units minus 
on-screen text capabilities and stereo audio circuits. 

PUBLICITY for others who have claimed the ability to 
break Videocipher has driven legitimate and skilled 
workers ‘underground’. A report on INN (Independent 
News Network; WPIX, TR19, F4) in particular frightened 
researchers who have broken Videocipher. This (INN) 
report showed a New York TVRO dealer making a minor 
adjustment to Videocipher to bring in the soft-scrambled 
video, and then ‘tuning in’ the audio on his FM tuner. The 
dealer maintains he has broken the audio; analysis shows 
he was merely tuning in the simulated stereo audio for 
HBO provided on their cable television FM band service. A 
firm to avoid, claiming the ability to modify Videociphers, 
is FullSpectrum/Stellar Industries in Oklahoma (City). 
Firm requires cash payment and Videocipher, is offering 
‘franchises’ and training purported to show you how to 
make Videocipher modifications. Scramble-Fax can locate 
no-one who has dealt with firm in satisfactory manner. 
HBO has written letter to TVRO publications warning 
about ‘black boxes turning out to be disguised Video- 
cipher Il consumer descramblers’, suggesting such 
products are illegal. 

TEST for true nature of modified Videocipher units is as 
follows: 

1) If unit offered will NOT descramble TRs 1,12 and 16 
on Galaxy 1, it is not a true Videocipher-buster unit. 

2) Units ‘software patched’ in U30, or authorized 
through normal channels (but represented as ‘buster 
units’) cannot receive TRs 1,12 and 16 because pro- 
grammers key-code these services so they will not be 
available to home dish users. 

3) Atrue ‘buster unit’ receives all Videocipher channels 
because as researcher points out ‘there is no such thing as 
being a little bit pregnant’; either units descramble every- 
thing, or they do not. If they do, the person doing the work 
has really figured it out. Any excuse offered for not decod- 
ing TRs 1,12 and 16 is invalid; except an admission that 
unit is not as represented. 
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U24 CHIP in Videocipher contains all important data flows 
needed by serious students of Videocipher system (see text for 
pin-out identifications). 


WHERE to from here? In addition to five or six groups 
who have now broken Videocipher, dozens more are on 
verge of solving final stages of problem. Many of the solu- 
tions will remain ‘underground’, perhaps to ‘leak out’ a 
tid-bit at a time through person to person contacts. A few, 
two are now pointed in this direction, will attempt to take 
solution ‘offshore’ to build some type of product that will 
be offered for sale only outside of United States. One of 
these solutions has three chips on interface board that 
wires into Videocipher 2000. Another recreates VC2000 
from ground up, eliminating circuits not required for basic 
decoding. This unit has four toggle switches which user 
sequences one at a time at end of each month to cause 
descrambler to lock onto new monthly master key 
transmitted. 
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U30 CHIP has been favorite target of ‘software specialists’ who 
have obtained intermittent access to some scrambled services by 
rewriting instructions to device through outboard computer such 
as IBM PC. 
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DO NOT expect widespread, or perhaps any, immediate 
availability of either interface boards or full work-alike 
descramblers, inside of USA, soon. Designers fear legal 
remedies open to M/A-Com and programmers, will con- 
centrate on supplying units in Canada, Mexico, Latin 
America and Caribbean where US laws do not apply. 
Expected pricing will be between $300 for interface board 
and $1,000 for work-alike descramblers initially, with 
supplies very limited. Scramble-Fax will NOT reveal off- 
shore sources for buster-units or boards UNTIL we have 
seen production products, and tested them. Units seen to 
date have been proto-types or have required elaborate 
computer (such as IBM PC) interfacing; not yet ready for 
simplified consumer hook-up and operation. 

SEVERAL crucial problems remain to be solved before 
either interface boards or work-alike descramblers can be 
putinto mass production. At least one chip found in REAL 
Videocipher is single sourced and NSA (National Security 
Agency) ‘monitored’ for bulk sales. Chip duplicate (clone) 
has been sourced offshore where DES restrictions do not 
apply but getting chip into production and into de- 
scrambler builder hands will take time; perhaps 90 to 150 
days. US source for chip used by M/A-Com plans to cease 
production in April (1987) but claims 300,000 of this key 
chip are presently available. Buyers can acquire small 
quantities without arousing NSA; quantities suitable for 
production present NSA monitoring-clearance problems. 
Same restrictions that apply to exporting Videocipher also 
apply to exporting this key chip. 

MANY will attempt to capitalize on general knowledge 
that VC2000 system is broken; expect clandestine offers 
from ‘offshore’ to infiltrate USA. Scramble-Fax will advise 
you of true sources for working units or boards when such 
products are REALLY available. Until you see it here, 
assume anyone offering suct products (from offshore) is 
rip-off. Stateside sources, if units really do provide decod- 
ing on TRs 1,12 and 16 of G1, will be subject to quick 
disappearance from marketplace as soon as (federal) 
authorities learn of their whereabouts. Scramble-Fax will 
NOT publicize sources for units or boards inside of USA 
as long as legal cloud hangs over their sale and use here. 
For your private study and education, we will continue to 
provide technical information to assist you in better 
understanding how the VC2000 functions. 

Sources for Videocipher schematics (prices vary with 
sources): Ray Winkel at 913/545-3685 (after 6 PM central); 
519/735-7361; Bomarc Services, P.O. Box 1113, Casper, 
Wyoming 82602. 

Patents of interest from US Patent Office, Washington, 
DC 20231 at price of $1.50 each: RCA scrambling system 
patent, granted July 22, 1986 with US Patent number 
4,602,274; Videocipher under Patent number 4,479,142. 
Copy of M/A-Com application for European patent for 


Videocipher filed May 16, 1984 under application number 
84303321.8 by William Charles Blatchford, WITHERS & 
ROGERS, 4 Dyers Buildings Holborn, London, EC1N 2JUT 
(GB), UK. 

HOME addresses of trio of engineers who created 
Videocipher: Woo H. Paik, 14932 Del Diablo Lane, San 
Diego, Ca. 92121; Jerrold A. Heller, 4232 Paviov Avenue, 
San Diego, Ca. 92122; and, Gordon Kent Walker, 811 Lib- 
erty Square Road, Boxborough, Massachusetts 01719. 

CANCOM busters using Westar Technologies clone- 
chip (see Scramble-Fax for September, 1986, or, CSD/ 
Coop’s Satellite Digest for September 15, 1986) experienc- 
ing surge in sales of Oak Orion P descramblers as well as 
Westar chip. Sources for descramblers and/or chips 
include: 301/298-2696 or 301/355-0823 (descramblers 
$425, chips $250; combo $600); 519/735-7361 (chips 
only); 218/681-5616 (descramblers, chips); 612/784-0129 
or 612/720-7956 (descramblers, chips). 

TELEASE decoders available with variable tuner cover- 
ing full range of channel codes for $250 at 301/298-2696 
and 301/355-0823. 

SPARKS Unlimited will assemble ‘Blackbox Solution’ 
units for a fee or provide wired and tested units; 
512/257-2196. 

CHIP that allows dealers to demonstrate Cinemax/ 
HBO/TMC/Showtime and other VIDEO (only) in stores, 
without audio and without violating copyright laws, can be 
plugged into VC2000 in store. Price is $49.95 from 
201/562-0080. 

VC2000 TECH CORNER 

Those looking for ‘raw data/control’ signals inside of 
VC2000 for scope display and study will find this useful: 

1) Locate U24 IC 

2) Following pins have data as shown on them: 

A) 9,10 and 11: Encryption key (fed to pins 2,7 and 
5 U28) 

B) 12: Digital audio (feeds to pin 10 of U28) 

C) 18: Data output (feeds to pin 13, U28) 

D) 19: Horizontal reference (feeds to pin 8 of U6; 
TV display generator) 

E) 22,23: Video output (feeds to pins 2,5 of U9A/B) 

F) 24: Black level reference (connects to pin 6 of U6) 

G) 25: Vertical reference (feeds to pin 7 of U6) 

During period roughly between 28th of month and 2nd 
of new month, all Videocipher programmers change their 
master key transmission for the new month. Sequence 
requires approximately 20 seconds time, consists of three 
or four 1 to 2 second audio program interrupts as new 
master key is ‘loaded’ into universe of descramblers. If you 
carefully study this monthly master key loading sequence 
with storage scope tied to pins 9/10/11 of U24, you will 
have new ‘clues’ to deciphering Videocipher. 

Plessey is now providing chips which replace U24 and 


THIS IS THE FOURTH ISSUE of Scramble-Fax (first issue April, 1986; second issue July 1986; third issue September 1986). This 
publication is re-newed at irregular intervals, as there are significant changes in the complex scrambling segment of the home 
TVRO industry. Issues are distributed on a single-copy basis at $10 each (bulk rates for larger quantities available). There is no 
subscription basis for Scramble-Fax and each issue must be ordered on a single copy basis. All readers are invited to call the 
Scramble-Fax Hotline telephone service (305/771-0575) which operates 24 hours per day. Our ‘Hotline’ provides a 3 minute 
recorded update on the very latest changes in the scrambling scene; be prepared with pencil and paper to record important data and 
telephone numbers given. You may also reserve the next issue of Scramble-Fax by telephoning 305/771-0505 weekdays between 9 
AM and 4 PM eastern with your VISA or Mastercharge card handy. Specify the current issue you have (this is the October issue) and 
request the ‘next issue’ as soon as available. Your order will be kept on file and your VISA/Mastercharge account will NOT be 


charged until the next issue is ready to be mailed. — 
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U5 in Videocipher; new to product line since September. 
HOUSTON Tracker System VIII receiver with built-in 
IRD descrambler has $2,200 suggested consumer price, 


not $1,400 (dealer) price reported in CSD for September 
15th. 


NOTE: The first three issues of Scramble-Fax contain listings of all home style receivers approved by M/A-Com for use with 
Videocipher units. This list is not repeated here because there are no significant changes or additions to the list since it last 
appeared in SF # 3. If you need a receiver, which is not VC2000 compatible, modified for use with a Videocipher contact Zephyrus 
Electronics in Tulsa, Oklahoma at 918/834-1229. SF is not aware of any other firms doing this retrofit work at the present time. 
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DESCRAMBLER SOURCES 

While descramblers are notin short supply at press-time, good 
deals in descramblers are. Units may not be taken out of the 
United States without violating US laws, claims M/A-Com, 
although shortly after VC2000s were first shipped last January, 
hundreds were shipped to Canada, and alot of 100 was shipped to 
the Bahamas (!) by M/A-Com error. They have subsequently been 
recalled. Special packages available include: 

ANIXTER offers free CNN/CNNH service when user pays $395 
for unit; credit cards accepted, nationwide shipment (800/ 
672-6190). 

CHANNEL MASTER offers free home video switcher unit as 
bonus; 800/225-7916. 

Scientific-Atlanta offering dealers special discounts (down to 
$295) on VC2000 when dealers buy complete TVRO system 
for resale. 

ELECTRIC Supply (Alabama) offers VC2000 units in single 
quantities for $359 each (800/633-1662). 


PROGRAMMING SOURCES 

HBO and Showtime have agreed to withdraw their rebate pro- 
gram which previously credited local cable franchisees with typi- 
cally $5 per month for each TVRO dish user in the cable franchise 


area who signed up for descrambled service directly with HBO or 
Showtime. However, neither firm plans to reduce the cost of their 
services to consumers and will retain the extra $5 themselves. 
Sources for turn-on programming are as follows: 


CNN, CNNH: $25 per year (includes WTBS) 404/827-2015 

HBO, Cinemax: $129.50 annual 1, $199.50 annual both or 
monthly 800/HBO-DISH to order or 212/302-6242 for brochure 

HSPD: Offers CNN, CNNH at $25 per year (404/447-6302) 

Home Dish Programming: Plans 4 channels at $95 per year 
(507/648-3841) 

First Run: Offers Fri/Sat/Sun recent movies simultaneous to 
release in videotape stores using Sony encryption system 
(800/523-7150) 

Prime-Time 24: Plans three network affiliates, Galaxy 3, 
November 1st for $49.95 per year using Videocipher (212/ 
725-1132). 

SelecTv: $95.40 per year or $26 per quarter (800/441-2535) 

Showtime, TMC: $120 per year annual 1, $186 annual both or 
monthly 800/422-9000 to order or 800/722-8226 for brochure. 

WGN: Sales numbers not yet available, for information 
800/331-4806 


THE SCRAMBLING TIME-TABLE 


THESE are the presently scrambled service channels or those planning to add scrambling in the next 60 days. For an update, call 
305/771-0575 for the Scramble-Fax Hotline report, prerecorded and 3 minutes in length. 


GALAXY 1/134 West 

TR1/ HBO promotional channel (not available home dishes), 
Videocipher 

TR3/ WGN (expected to start testing shortly) 

TR5/ Showtime East (fulltime Videocipher) 

TR7/ CNN (fulltime Videocipher) 

TR8/ CNN Headline (fulltime Videocipher) 

TR10/ The Movie Channel West (fulltime Videocipher) 

TR12/ Request TV (not available home dishes), Videocipher 
TR14/ The Movie Channel West (fulltime Videocipher) 

TR15/ WOR (not available to home dishes), Videocipher 

TR16/ Viewer’s Choice (not available home dishes), Videocipher 
TR19/ Cinemax East (fulltime Videocipher) 

TR23/ HBO East (fulltime Videocipher) 

SATCOM F3R/ 131 West 

TR2/ Dodger Vision (in season; not available home dishes), Oak 
Orion 

TR5/Viewer’s Choice (not available to home dishes), Videocipher 
TR10/ Showtime West (fulltime Videocipher) 

TR13/ HBO West (fulltime Videocipher) 

TR23/ Cinemax West (fulltime Videocipher) 

Telstar 303/ 125 West 

TR2/ SelecTv (missed scheduled October 1st scrambling date), 
Videocipher 

TR11/ American Extasy (fulltime Videocipher) 

Westar 5/ 122.5 West 

TR20/ Telebet Racing Alive (Penn National racing, not available 
to home dishes), Oak Orion 

SPACENET 1/ 120 West 

TR7/ Hospinet (in hospital teleconferences), Oak Orion (Polaris) 


TR9/ First Run (evenings, Fri-Sat-Sun), Sony (custom) system 
from ABC 

TR11/ Hospital Satellite Network (launching entertainment, 
evenings, Nov. 1), Oak Orion 

TR21/ Baptist Satellite Network, Oak Orion 

TR23/ Home Dish Programming (scrambling system not 
announced) 

ANIK D/104.5 West 

TR2/ The Sports Network (scheduled), Oak Orion 

TR8/ CHCH, Oak Orion (Canadian Indie) 

TR9/ WDIV, Oak Orion (Detroit NBC) 

TR10/ WXYZ, Oak Orion (Detroit ABC) 

TR14/ TCTV, Oak Orion (French Indie) 

TR18/ CITV, Oak Orion (Canadian Indie) 

TR21/ WTVS, Oak Orion (Detroit PBS) 

TR22/ CHAN-BCTV, Oak Orion (Canadian Indie) 

TR23/ WJBK, Oak Orion (Detroit CBS) 

GTE GSTAR 1/ 103 West (Ku Band) 

TR12/ Hi-Net on both ‘halves’, $/A B-MAC 

TR16/ Hi-Net on both ‘halves’, S/A B-MAC 

WESTAR 4/ 99 West 

TR6/ Monmouth Park Racing, Oak Orion 

TR9/ Catholic Telecommunications Net, Oak Orion 

TR11/ Meadowlands Racing, Oak Orion 

TR20/ Cherry Hills Horse Racing, Oak Orion 

GALAXY 3/ 93.5 West 

TR2/ Del Mar Racing, Oak Orion 

TR14/ Finger Lakes Racing, Oak Orion 

TR18/ NYRA (Racing), S/A B-MAC Yonkers/Roosevelt Raceway 
Racing 
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TR21/ Hawthorne Park Racing, Oak Orion SATCOM F4/ 83 West 
Telstar 2/ 86 West TR16/ Cable Video Store (movies), GI Starlock II 
TR18/ CBS central time zone, partial encrypted for Videocipher TR23/ Philadelphia Horse Racing, Oak Orion 
I test RCA Ku-2/ 81 West 

TR14/ AT&T Skynet Service (teleconferences), S/A B-MAC 
RCA Ku-1/ 85 West SPACENET 2/ 69 West 
TR3/ HBO West (not available home dishes), Videocipher TR21/ (Ku) Texas State Interactive Network, GI Starlock II 
TR13/ Cinemax West (not available home dishes), Videocipher Updates? Call Scramble-Fax Hotline at 305/771-0575 for a3 
TR15/ HBO Festival (not available home dishes), Videocipher minute recorded telephone update. 


HBO/Cinemax implemented 'Parental Movie Ra- 
ting' service via Videocipher October 6; 


SHOWTIME/The Movie Channel added this 'fea- 
i ture’ October 7th. Big problems. nationwide 
perhaps 40% of all Videociphers thave 42:06 


performance on R (and X) rated movies. Here 
is solution: Push 'Set-Up 3'. Graphic display should have two arrows at 
bottom of display IF you have unit control of “Parental Mode". Puce 
RIGHT arrow until on screen display says you have" X rating.) vou 
have no arrows on display, go to Set-Up,1.and obtain unit "TD' code. 
Now call M/A-Com Tech Authorization Center 800/344-6754 and tell them 
of problem. They will send instructions clearing mis-guided “BC Tamas 
after 6PM same day or next day via authorized satellite service chann- 
el. You _ have this problem if your box shuts down on R rated movies. 

WESTAR firm in Toronto,..source for.0akOrion 94P" (clone i chipseand 
their technical Guru John Davidson have parted company. Davidson no 
longer running firm and Westar may end supplying of Oak P clone chips 
very shortly. Davidson used Mostek 38P70/02 ‘carrier chip! topped wie 
2716 or 2732 chip, for clone. Even if Westar drops out as source for 
Oak P clones, othérs Can, clone Davidson ’s Chip. tn quantities of 20Gr 
38P7/70/2 and top chip ‘come: in, at wander ™s40enerecoa 

MOSTEK 38P70/2 may be at end of ‘useful life' anyhow; Mostek would 
prefer to switch users to 38E70 which is eraseable chip with same ba- 
Sic features as 'P' series, although copying is more expensive. 

GSTAR service for Holiday Inn on Ku band still seems to be unscramb- 
led although Holiday is B-MAC scrambling conference and pay per view 
channels on same feeds. Showtime (east/west), CNN and ESPN in the clear. 

LATEST VC2000 units appear to have switched from TI to NCR as source 
for tricky U7 microprocessor. NCR chips aire alsosbeltevedmionpe widely 
used in’ Cash register security =systeme. 

TEKTRONIX showing off ‘microprocessor emulator', model L241), which 
has ability to study and disclose entire contents of 4K memory '‘'hidden' 
inside of U7 chip in VC2000. Emulator has been available as ‘reverse 
engineering tool' but previously would not handle 'TI' created chips. 
With appropriate, 1BM..PC software, model 1241 wall identify which data 
bits contain audio, which do not, on built-in screen display. 

RESEARCHERS who have broken into VC2000 concerned that M/A-Com may 
have ability via Uplink Wo reload 4k memory in U7 with new data, clear- 
ing out all authorized units at one time and then reloading via satell- 
ite with new data that would 'plug hole' discovered in U7 software 
program. Question is important because software hackers have been able 
to empty U7 4K data base for analysis and "patching! but worry tehae 
M/A-Com could counter attack through uplink/downlink reloading. 
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